When TLS is enabled, this optional parameter enables ephemeral
EC keying by specifying the name of the elliptic curve to use. The default
is to not enable ephemeral EC keying.
# Curves often have multiple aliases. Need OpenSSL name here.
# openssl ecparam -list_curves
TLS_ECDH_Curve prime256v1